OAuth.io

Infrastructure

authentication service

SHOW HN2013

66points
22comments
#383of 1,739 in 2013
Top 23%of 2013 by points

How HN took it

RoastedHalf or more of the comments are critical

3 positive, 2 neutral or asking, 0 mixed, 13 critical, out of 18 comments about the project. Thread score -0.50.

Idea: 2 for, 5 againstDesign: 0 for, 5 againstPrivacy: 0 for, 1 againstPricing: 1 for, 0 againstDocs: 0 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Saves time versus implementing several OAuth providers by hand

    From 2 comments
    • I feel it is made for fast Oauth integration. We use 4 oauth providers into one of our app, and it took us really 4 full days to implement them without bug. We are not Oauth…
      nadiac on HN
    • Nice stuff! Definitely beats using Gigya or Janrain which cost quite a bit. This is the only part we were interested in anyway so... Are you guys planning on adding services and…
      jmelul on HN
  • Cheaper than Gigya or Janrain

    From 1 comment
    • Nice stuff! Definitely beats using Gigya or Janrain which cost quite a bit. This is the only part we were interested in anyway so... Are you guys planning on adding services and…
      jmelul on HN

Objections

  • Adds an untrusted intermediary that can see user data

    From 1 comment
    • Previous discussion: https://news.ycombinator.com/item?id=5777102 From a security perspective, this is a horrible idea, adding a completely untrusted intermediary. OAuth.io will…
      Titanous on HN
  • Single provider revocation could take down all customers

    From 1 comment
    • Worse than that. You are at the mercy of what service providers think of both them AND all of their clients. Suppose that they have a customer who uses their service to install…
      btilly on HN
  • Unclear value; the service is a step backward for OAuth

    From 2 comments
    • I think this is a step backward. The OAuth specs were designed to make it easier to work with different services and now we have to utilize yet another service to communicate…
      sondh on HN
    • Thanks for the correction. In that case, I fail to see the value add that they claim to provide.
      btilly on HN
  • Back button is broken on the site

    From 2 comments

Requests

  • Provide a public list of the 70 providers without sign-up

    From 1 comment
    • This is still beta page. I can't see list of 70 providers.
      alpb on HN
  • Add a description or explainer of what the service does

    From 1 comment
    • So... Where can I find more information on what this is and how it works? There isn't even a description on the website on what oauth.io is, just a small code snippet. Why am I…
      Avalaxy on HN
  • Allow registration via OAuth

    From 2 comments
    • I clicked the login button on your oauth.io site' and I was surprised to see a basic email/password form. Why not use your own product to allow login through Facebook, twitter,…
      calebclark on HN
    • I can't register on their website using OAuth? Really?
      aymeric on HN

Questions

  • Will more services be added and maintained over time?

    From 1 comment
    • Nice stuff! Definitely beats using Gigya or Janrain which cost quite a bit. This is the only part we were interested in anyway so... Are you guys planning on adding services and…
      jmelul on HN

Alternatives named

  • Gigya and Janrain

    From 1 comment
    • Nice stuff! Definitely beats using Gigya or Janrain which cost quite a bit. This is the only part we were interested in anyway so... Are you guys planning on adding services and…
      jmelul on HN
  • HybridAuth

    From 2 comments
    • I think this is a step backward. The OAuth specs were designed to make it easier to work with different services and now we have to utilize yet another service to communicate…
      sondh on HN
    • I would recommend rolling your own consumers, or using one of the following libraries: - http://hybridauth.sourceforge.net/ (PHP) - https://github.com/intridea/omniauth (Ruby)…
      canadev on HN
  • OmniAuth

    From 1 comment
    • I would recommend rolling your own consumers, or using one of the following libraries: - http://hybridauth.sourceforge.net/ (PHP) - https://github.com/intridea/omniauth (Ruby)…
      canadev on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/5974748)